Merge "Add neverallow rules further restricing service_manager."